1. Introduction
Nobot (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Nobot mobile application (“App”) and related services.
By accessing the App, you agree to the practices described in this policy. If you have any questions, contact us at privacy@nobot.app.
2. Information We Collect
Account Information
When you sign in with Google or Apple, we receive your name, email address, profile photo, and authentication tokens necessary to create and manage your account.
Usage Data
We capture anonymized feature usage and performance metrics to understand how the App is used. Google user data, including Gmail content, metadata, and derived data, is not included in analytics.
Device Information
Device type, OS version, language settings, app version, and unique device identifiers help us optimize compatibility and security.
Email Data
When you explicitly connect Gmail, Nobot requests read-only access to your Gmail account. Nobot accesses your connected email address and recent message information required for Gmail features, including sender, subject, received time, read status, and a short content snippet. Nobot does not access Gmail attachments. This data is processed only with your explicit consent.
AI Interactions
Prompts and generated content from Nobot's non-Gmail AI tools may be temporarily stored in Firebase to deliver the features you request. Google user data used by Gmail features is handled only as described in Section 4 below.
3. How We Use Your Information
- Provide, maintain, and improve Nobot services
- Personalize experiences and surface relevant tools
- Analyze usage patterns to enhance performance
- Send notifications and product updates with consent
- Process AI requests through Firebase AI/Gemini infrastructure
The general analytics, personalization, marketing, and product-improvement purposes in this section do not apply to Google user data. Google user data is used only for the user-facing Gmail features described below.
4. Google User Data
How We Access and Use Google User Data
When you connect Gmail, Nobot uses the Gmail read-only permission to retrieve recent inbox message information. We use that information only to provide prominent, user-facing features that you request, including displaying recent inbox context and generating email summaries, action items, and daily briefings. Nobot does not use Google user data for advertising, retargeting, analytics, credit decisions, lending, data brokerage, information resale, creating unrelated databases, or any other unrelated purpose.
AI Processing and Data Transfers
If you separately enable Email AI and request an AI-powered Gmail feature, Nobot sends the selected message previews to Google's Firebase AI/Gemini service solely to generate the response you requested. Nobot does not use, transfer, or permit Google user data to be used to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.
We do not sell Google user data. We do not share or transfer Google user data except as necessary to provide or improve the user-facing feature you requested, with your consent; when required for security purposes; or when required to comply with applicable law.
Storage, Retention, and Deletion
Gmail authorization credentials and a limited cache of recent message previews are stored in secure storage on your device. Cached Gmail data is used only to provide the Gmail features you selected and is not included in analytics. Disconnecting Gmail removes its authorization credentials and cached Gmail data from the device. Deleting your Nobot account also removes the connected-account data associated with that account, except where retention is required by law.
Google API Limited Use
Nobot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Data Storage and Security
Application data may be stored in Google Firebase (Firestore and Storage) with encryption in transit and at rest. Authentication is handled through Firebase Auth using secure OAuth flows. Connected-account credentials and limited provider caches are stored in secure storage on the device. Local preferences may also be stored on-device for faster access. We retain data only as long as necessary to provide the services you request or comply with legal obligations.
6. Third-Party Services
- Firebase (Google): authentication, database, storage, performance, and analytics services. Google user data obtained through Gmail APIs is not provided to Firebase Analytics. View policy.
- Google Sign-In: identity provider for OAuth.
- Apple Sign-In: identity provider for OAuth.
- Firebase AI/Gemini: processes AI prompts and generates responses needed for user-requested AI features. Google user data is sent for this purpose only when Email AI is enabled and the user requests the feature.
7. User Rights
You have the right to access, correct, export, or delete your personal data. Submit requests via in-app settings or email. You may opt out of certain analytics or disable data collection features. Account deletion removes associated user data within 30 days, except where retention is required by law.
8. Children's Privacy
Nobot is not intended for children under 13 (or under 16 where local law requires). We do not knowingly collect information from minors. If we learn that a child has provided personal data, we will delete it promptly.
9. International Users
If you access Nobot from outside the United States, be aware that data may be transferred to and processed in the U.S. We comply with GDPR requirements, including user consent, data minimization, and the right to access or erase data. Standard Contractual Clauses govern cross-border transfers where applicable.
10. Changes to this Policy
We may update this Privacy Policy to reflect product, legal, or regulatory changes. Material updates will be communicated via in-app notices or email. Continued use of Nobot after changes become effective constitutes acceptance of the updated policy.
11. Contact Information
Questions or requests? Email privacy@nobot.app. Business address: 36418-00200, Nairobi Kenya. We aim to respond within 30 days.